John Gardiner Myers
|
cfd1582b0d
|
Use kubeconfig for authentication and authorization as well
|
2021-07-21 19:24:06 -07:00 |
John Gardiner Myers
|
8416bd0c39
|
hack/update-expected.sh
|
2021-07-17 14:25:19 -07:00 |
John Gardiner Myers
|
526dd38e16
|
Remove apiserver's access to controller-manager secrets
|
2021-07-17 14:25:19 -07:00 |
John Gardiner Myers
|
226380bf5b
|
Refactor legacy etcd manager etcd-client keypair
|
2021-07-17 14:25:19 -07:00 |
Kubernetes Prow Robot
|
67cfa9d4d4
|
Merge pull request #12003 from johngmyers/apiserver-server-cert
Refactor more kube-apiserver credentials
|
2021-07-17 13:52:50 -07:00 |
John Gardiner Myers
|
12c988160c
|
hack/update-expected.sh
|
2021-07-16 23:12:22 -07:00 |
John Gardiner Myers
|
7c1ed8de66
|
Refactor kube-apiserver kubelet-api certificate
|
2021-07-16 23:07:14 -07:00 |
John Gardiner Myers
|
68bb8f5ddb
|
Refactor kube-apiserver static credentials
|
2021-07-16 22:55:50 -07:00 |
John Gardiner Myers
|
781b302fac
|
hack/update-expected.sh
|
2021-07-16 22:46:41 -07:00 |
John Gardiner Myers
|
c8b1a586b8
|
Refactor kube-apiserver server certificate
|
2021-07-16 22:42:23 -07:00 |
John Gardiner Myers
|
3282549577
|
Issue kubelet cert on apiserver nodes for k8s before 1.19
|
2021-07-16 10:13:20 -07:00 |
John Gardiner Myers
|
3ae5413f63
|
Use keypair IDs for non-kops-controller-issued worker node certs
|
2021-07-15 14:04:48 -07:00 |
John Gardiner Myers
|
10692bc2f4
|
hack/update-expected.sh
|
2021-07-14 08:19:10 -07:00 |
John Gardiner Myers
|
191df58267
|
Verify CA keypair IDs for kops-controller-issued certs
|
2021-07-14 08:15:28 -07:00 |
Ole Markus With
|
c17ec3a7e7
|
Move containerd config from cloudup to nodeup
|
2021-07-14 10:28:37 +02:00 |
John Gardiner Myers
|
9dbf3479d6
|
Stop writing the certificate-only keyset.yaml
|
2021-07-11 11:16:11 -07:00 |
Kubernetes Prow Robot
|
73b1bce020
|
Merge pull request #11975 from johngmyers/refactor-legacy
Issue certs using CA KeypairID in NodeupConfig
|
2021-07-11 01:56:47 -07:00 |
Kubernetes Prow Robot
|
a3daff9343
|
Merge pull request #11971 from johngmyers/rotate-all
Add "all" variants of key rotation commands
|
2021-07-11 00:30:46 -07:00 |
John Gardiner Myers
|
61606868ab
|
hack/update-expected.sh
|
2021-07-10 23:23:13 -07:00 |
John Gardiner Myers
|
68041a4f73
|
Issue certs using CA KeypairID in NodeupConfig
|
2021-07-10 23:23:12 -07:00 |
John Gardiner Myers
|
6ddccf5f79
|
Refactor some users of FindPrimaryKeypair
|
2021-07-10 23:23:12 -07:00 |
John Gardiner Myers
|
6f06661a68
|
Use narrower interface type
|
2021-07-10 23:23:12 -07:00 |
John Gardiner Myers
|
a33a30a859
|
Refactor out some legacy interfaces
|
2021-07-10 23:23:12 -07:00 |
John Gardiner Myers
|
a63e65038f
|
hack/update-expected.sh
|
2021-07-10 17:31:59 -07:00 |
John Gardiner Myers
|
d58a19e1bd
|
Refactor service-account signing key
|
2021-07-10 17:31:59 -07:00 |
John Gardiner Myers
|
5a2aac4cfd
|
Add "all" variants of key rotation commands
|
2021-07-10 05:51:31 -07:00 |
John Gardiner Myers
|
6846ef3a80
|
Fix function comment
Co-authored-by: Ole Markus With <olemarkus@gmail.com>
|
2021-07-09 23:50:02 -07:00 |
John Gardiner Myers
|
c35d101a89
|
Refactor keysets for etcd-manager
|
2021-07-08 18:46:03 -07:00 |
Ciprian Hacman
|
0ed8942835
|
Add log rotation for etcd-cilium.log
|
2021-07-07 08:31:08 +03:00 |
John Gardiner Myers
|
5834fc2690
|
hack/update-expected.sh
|
2021-07-03 17:33:13 -07:00 |
John Gardiner Myers
|
921d09523e
|
Rename the "ca" keyset to "kubernetes-ca"
|
2021-07-03 17:33:13 -07:00 |
Peter Rifel
|
c5fbcccfa6
|
Update pause image to 3.5
|
2021-07-02 06:40:27 -04:00 |
John Gardiner Myers
|
5c5969d102
|
hack/update-expected.sh
|
2021-07-01 22:25:51 -07:00 |
John Gardiner Myers
|
1e0c6cb1aa
|
Refactor apiserver-aggregator-ca
|
2021-07-01 22:25:47 -07:00 |
John Gardiner Myers
|
7162a7473a
|
Remove dead code
|
2021-07-01 13:58:51 -07:00 |
John Gardiner Myers
|
0f1de5cfc8
|
hack/update-expected.sh
|
2021-06-30 18:55:35 -07:00 |
John Gardiner Myers
|
3de05a500e
|
Refactor etcd-clients-ca keyset for api-server
|
2021-06-30 18:55:30 -07:00 |
John Gardiner Myers
|
7dfe9d82ab
|
hack/update-expected.sh
|
2021-06-27 08:45:06 -07:00 |
John Gardiner Myers
|
e1df9f09dd
|
Refactor service-account public keys
|
2021-06-27 08:45:06 -07:00 |
John Gardiner Myers
|
20ca7082d7
|
hack/update-expected.sh
|
2021-06-27 08:45:05 -07:00 |
John Gardiner Myers
|
7e0c6acbad
|
Take poorly formed keypair out of tests
|
2021-06-27 08:45:05 -07:00 |
John Gardiner Myers
|
60ae29c93c
|
Refactor EncryptionConfig
|
2021-06-27 08:45:05 -07:00 |
John Gardiner Myers
|
fdf034058d
|
hack/update-expected.sh
|
2021-06-27 08:45:05 -07:00 |
John Gardiner Myers
|
1312163edd
|
Update nodes with an APIServer when APIServer spec changes
|
2021-06-27 08:45:04 -07:00 |
John Gardiner Myers
|
5de6d16e76
|
Catch calls to GetBootstrapCert from control plane
|
2021-06-26 00:04:52 -07:00 |
John Gardiner Myers
|
2faf28379a
|
Refactor etcd-client-cilium secrets
|
2021-06-25 23:57:23 -07:00 |
John Gardiner Myers
|
1752f0f4db
|
Move most of nodeup.Config out of userdata
|
2021-06-25 22:25:49 -07:00 |
John Gardiner Myers
|
c132ae1520
|
Move fields from AuxConfig to nodeup.Config
|
2021-06-25 18:41:29 -07:00 |
Ciprian Hacman
|
d7f405f65a
|
Decrease default values for net.ipv4.tcp_rmem and net.ipv4.tcp_wmem
|
2021-06-25 21:27:56 +03:00 |
Kubernetes Prow Robot
|
0e4d766deb
|
Merge pull request #11852 from hakman/hooks-containerd
Handle containerExec hooks when using containerd
|
2021-06-23 23:27:40 -07:00 |